XAA is a great improvement to where we were in 2025. It helps track user access to mcp tools. There is a few other ongoing efforts in the IETF community. Eg; https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenu... (implementation: https://github.com/tenuo-ai/tenuo)

There was quite a long debate about "Hallucination Defense" here: https://news.ycombinator.com/item?id=46815527